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The Claims 

1* (Original) One or more computer readable media having stored 
thereon a plurality of instructions that, when executed by one or more processors, 
causes the one or more processors to determine whether an input value matches 
any of a plurality of target values by performing acts including: 

generating a hash key based on the input value; 

separating the hash key into a plurality of portions; 

indexing into each of a plurality of sub-hashes using one of the plurality of 
portions; 

identifying a plurality of values from the plurality of sub-hashes based on 
the indexing; 

combining the plurality of values to generate a hash result, wherein each bit 
in the hash result corresponds to one of the plurality of target values; and 

for each bit in the hash result that is set, comparing the input value to the 
corresponding target value to determine whether the values match. 

2. (Original) One or more computer readable media as recited in claim 
1, wherein the number of target values in the plurality of target values is equal to 
the number of bits in the hash result 
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3. (Original) One or more computer readable media as recited in claim 
1, wherein a maximum number of target values in the plurality of target values is 
equal to the number of bits in the result value. 



4. (Original) One or more computer readable media as recited in claim 
1, wherein a maximum number of target values in the plurality of target values is 
equal to the number of bits in each of a plurality of locations of the plurality of 
sub-hashes that can be indexed. 



5. (Original) One or more computer readable media as recited in claim 
1, wherein the separating comprises separating the hash key into two portions, 

6. (Original) One or more computer readable media as recited in claim 
1, wherein the separating comprises separating the hash key into a plurality of 
contiguous and equal portions. 



7. (Original) One or more computer readable media as recited in claim 
1, wherein the combining comprises performing a bitwise logical ANDing of the 
plurality of values. 



8. (Original) A hashing architecture comprising: 
a plurality of sub-hashes; 

a plurality of sub^hash indexes, each index being generated from a hash key 
and used to index into one of the plurality of sub-hashes; and 
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a combiner coupled to receive values from the plurality of sub-hashes based 
on the plurality of sub-hash indexes, and to generate a hash result by combining 
the received values. 

9. (Original) A hashing architecture as recited in claim 8, wherein the 
combiner comprises a combinatorial logic component to perform a bitwise logical 
ANDing of the values received from the plurality of sub-hashes. 

10. (Original) A hashing architecture as recited in claim 8, wherein the 
hashing architecture is implemented in software. 

11. (Original) A hashing architecture as recited in claim 8, wherein the 
hashing architecture is implemented in firmware. 

12. (Original) A hashing architecture as recited in claim 8, wherein the 
hashing architecture is implemented in hardware* 

13. (Original) A hashing architecture as recited in claim 8, wherein the 
plurality of sub-hash indexes are generated by separating the hash key into a 
plurality of equal portions. 

14. (Original) A method comprising: 

generating a plurality of sub-hash keys based on a hash key; 
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identifying a plurality of values from a plurality of sub-hashes by indexing 
into each of the plurality of sub-hashes using one of the plurality of sub-hash keys; 
and 

generating a hash result based on the plurality of values. 

15. (Original) A method as recited in claim 14» further comprising 
generating the hash key prior to generating the plurality of sub-hash keys. 

16. (Original) A method as recited in claim 14, wherein the generating 
the plurality of sub-hash keys comprises separating the hash key into a plurality of 
equal portions. 

17. (Original) A method as recited in claim 14, wherein the generating 
the hash result comprises performing a bit-by-bit logical ANDing of the plurality 
of values. 

18. (Original) One or more computer readable media including a 
computer program that is executable by a processor to perform the method recited 
in claim 14. 
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19. (Original) One or more computer readable media having stored 
thereon a plurality of instructions that, when executed by one or more processors, 
determine whether a security identifier of an access control element matches any 
of a plurality of security identifiers of a security token by causing the one or more 
processors to perform acts including: 

generating a hash key based on the access control element security 
identifier; 

separating the hash key into a first portion and a second portion; 
indexing into a first sub-hash using the first portion to identify a first sub- 
hash value; 

indexing into a second sub-hash using the second portion to identify a 
second sub-hash value; 

combining the first sub-hash value and the second sub-hash value to 
generate a result value, wherein each bit in the result value corresponds to one of 
the plurality of security token security identifiers; and 

for each bit in the result value that is set, comparing the access control 
element security identifier to the corresponding security token security identifier. 

20, (Original) One or more computer readable media as recited in claim 
19, wherein the generating comprises generating the hash key by selecting a 
portion of the access control element security identifier. 
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2 1 . (Original) One or more computer readable media as recited in claim 
19, wherein the separating comprises separating the hash key into two portions 
that include an equal number of bits and that are contiguous. 

22. (Original) One or more computer readable media as recited in claim 
19, wherein the combining comprises bitwise ANDing together the first sub-hash 
value and the second sub-hash value. 

23. (Original) A method of determining whether an input security 
identifier matches one or more of a plurality of target security identifiers, the 
method comprising: 

generating a plurality of sub-hash indexes based on a hash key; 

indexing into each of a plurality of sub-hashes using a respective one of the 
plurality of sub-hash indexes; 

generating a result hash value by combining the plurality of values resulting 
from indexing into the plurality of sub-hashes, wherein each of the plurality of 
target security identifiers corresponds to a portion of the result hash value; and 

comparing the input security identifier to at least one of the plurality of 
target security identifiers that corresponds to a portion of the result hash value 
having a particular value. 

24. (Original) A method as recited in claim 23, wherein the particular 
value comprises a value of one. 
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25. (Original) A method as recited in claim 23, wherein each portion is 
a bit of the result hash value. 

26. (Original) A method as recited in claim 23, wherein the generating a 
plurality of sub-hash indexes comprises: 

selecting a portion of the input security identifier; 

separating the portion into two equal and contiguous sub-portions; and 

using each of the sub-portions as one of the plurality of sub-hash indexes. 

27. (Original) A method as recited in claim 23, wherein the generating 
the result hash value comprises generating the result hash value by performing a 
bitwise logical ANDing of the plurality of values. 

28. (Original) A method as recited in claim 23, wherein the input 
security identifier comprises an access control security identifier and each of the 
plurality of target security identifiers comprises a security token security identifier. 

29. (Original) A method as recited in claim 23, wherein the input 
security identifier comprises a security token security identifier and each of the 
plurality of target security identifiers comprises an access control security 
identifier. 
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30. (Original) One or more computer readable media including a 
computer program that is executable by a processor to perform the method recited 
in claim 23. 

3 1 . (Original) A system comprising: 

a plurality of security token security identifiers corresponding to a user; 
a plurality of access control security identifiers corresponding to an object; 
a plurality of sub-hashes; and 

an access controller to determine whether any of the plurality of security 
token security identifiers match any of the plurality of access control security 
identifiers by, for each of the plurality of access control security identifiers, 

generating a plurality of sub-hash indexes based on a hash key, 

indexing into each of the plurality of sub-hashes using a respective 
one of the plurality of sub-hash indexes, 

identifying a plurality of values from the plurality of sub-hashes 
based on the indexing, 

combining the plurality of values to generate a hash result value, 
wherein each bit in the hash result value corresponds to one of the plurality 
of security token security identifiers, and 

for each bit in the result value that is set, comparing the access 
control security identifier to the corresponding security token security 
identifier to determine whether the values match. 



9 



Application No. 09/704,186 



PAGE 1 1/29 1 RCVD AT 6/22/2004 2:06:00 PM [Eastern Daylight Time] ' SVR:USPTO-EFXRF-1/0 * DNIS:8729306 ' CS1D:509 323 8979 " DURATION (mm-ss):07-26 



JUN 22 2004 11:20 FR LEE - HAYES PLL 509 323 8979 TO 17038729306 P. 12/29 



32. (Original) A system as recited in claim 31, wherein the plurality of 
sub-hashes comprise two sub-hashes. 

33. (Original) A system as recited in claim 31, wherein each bit in the 
result value that is set has a value of one* 

34. (Original) A system as recited in claim 31, wherein the combining 
comprises bitwise logically ANDing together the plurality of values. 

35* (Original) A system as recited in claim 31, wherein each of the 
plurality of values and the hash result value each includes a number of bits equal 
to a maximum number of security token security identifiers that can be included in 
the plurality of security token security identifiers. 

36- (Original) A system as recited in claim 31 » wherein the system 
comprises an operating system. 

37. (Original) A system as recited in claim 31, wherein the system 
comprises a resource manager that is not a part of an operating system. 

38, (Original) A method comprising: 

for each sub-hash in a plurality of sub-hashes that can be used together to 
generate a hash result, 

(a) identifying a bit in a location of a sub-hash, 
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(b) identifying, in a source value, a plurality of bits 
corresponding to the sub-hash, 

(c) comparing an identifier of the location to the plurality of bits, 

(d) setting the bit if the identifier of the location matches the 
plurality of bits, and otherwise clearing the bit, and 

(e) repeating acts (a), (b), (c), and (d) for each of a plurality of 
bits in the location of the sub-hash. 

39. (Original) A method as recited in claim 38, wherein the plurality of 
bits correspond to part of a portion of the source value that will be used to generate 
a hash value. 

40. (Original) One or more computer readable media including a 
computer program that is executable by a processor to perform the method recited 
in claim 38, 
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